Maven package vulnerabilities
The newest vulnerabilities affecting Maven packages, up to 200. Subscribe by RSS.
- CVE-2026-45049OpenAM Session Hijacking via CDSSOOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-118259opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsingopen-telemetry opentelemetry-java · io.opentelemetry:opente…
- CVE-2026-44179XWiki Pro Macros: excerpt-include title and content injection executes codexwikisas xwiki-pro-macros · com.xwiki.pro:xwiki-pro-macros
- CVE-2026-116590snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWritexerial snappy-java · org.xerial.snappy:snappy-java
- CVE-2026-113730OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxiesorphan-oss ognl · ognl:ognl
- CVE-2026-111765A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fixa2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-http-…
- CVE-2026-111764A2A Java SDK has a fail-open default task authorizationa2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-serve…
- CVE-2026-111763A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirecta2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-parent
- CVE-2026-111762A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failurea2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-trans…
- CVE-2026-111761A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification deliverya2aproject a2a-java · org.a2aproject.sdk:a2a-java-sdk-serve…
- CVE-2026-102834JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoSbytedeco javacv · org.bytedeco:javacv
- CVE-2026-97370Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extractionjunrar · com.github.junrar:junrar
- CVE-2026-55414NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)nl-portal-backend-libraries · nl.nl-portal:form
- CVE-2026-54683NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463)nl-portal-backend-libraries · nl.nl-portal:documenten-api
- CVE-2026-102695OmniFaces: Forged combined-resource IDs and related output/push boundariesomnifaces · org.omnifaces:omnifaces
- CVE-2026-54641OpenRemote: Cross-Realm User Information Disclosure in UserResourceImplopenremote · io.openremote:openremote-manager
- CVE-2026-54640OpenRemote: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactoryopenremote · io.openremote openremote-manager +1
- CVE-2026-54697ConnectBot SSH: Excessive allocation and integer overflow in DER private-key parsingconnectbot cbssh · org.connectbot.sshlib:sshlib
- CVE-2026-54700ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocationconnectbot cbssh · org.connectbot.sshlib:sshlib
- CVE-2026-107226AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPSAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-102554Denial of Service via Eager Array Allocation During Deserialization in GuavaGoogle Guava · com.google.guava:guava
- CVE-2026-108106Xerial snappy-java before 1.1.10.9 Unbounded Memory Allocation Denial of Servicexerial snappy-java · org.xerial.snappy:snappy-java
- CVE-2026-107726Hazelcast: Arbitrary member memory access by low-privileged clienthazelcast · com.hazelcast:hazelcast
- CVE-2026-107725Hazelcast: Authorization bypass in IMap Predicates APIhazelcast · com.hazelcast:hazelcast
- CVE-2026-107285AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnelAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-107283AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random sourceAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-107282AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new hostAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-107280AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-107231AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartextAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-107230AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy loginsAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-107228AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)AsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-107227AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabledAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-106453yawkat LZ4 Java: LZ4DecompressorWithLength allocates the unvalidated size from the 4-byte length header, so a 5-byte input triggers a 1 GiB allocation and OutOfMemoryErroryawkat lz4-java · at.yawk.lz4:lz4-java +1
- CVE-2026-106452yawkat LZ4 Java: LZ4BlockInputStream allocates an unvalidated compressed length from the stream headeryawkat lz4-java · at.yawk.lz4:lz4-java +1
- CVE-2026-106451yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local useryawkat lz4-java · at.yawk.lz4:lz4-java +1
- CVE-2026-106450yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputsyawkat lz4-java · at.yawk.lz4:lz4-java +1
- CVE-2026-106449yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowErroryawkat lz4-java · at.yawk.lz4:lz4-java +1
- CVE-2026-106123RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()rabbitmq-java-client · com.rabbitmq amqp-client +1
- CVE-2026-106122RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumersrabbitmq-java-client · com.rabbitmq amqp-client +1
- CVE-2026-106121RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoSrabbitmq-java-client · com.rabbitmq amqp-client +1
- CVE-2026-54049Sakai Conversations has a Stored XSS Issuesakaiproject sakai · org.sakaiproject.conversations:saka… +2
- CVE-2026-103922Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy pathionic-team capacitor · @capacitor android +6
- CVE-2026-100834http4k before 6.48.0.0 Digest Authentication Replay Protection Bypasshttp4k · org.http4k:http4k-security-digest
- CVE-2026-100725http4k before 6.48.0.0 Cookie Scoping Bypass via BasicCookieStoragehttp4k · org.http4k:http4k-core
- CVE-2026-100724http4k before 6.49.0.0 Host Header Routing Bypass via reverseProxyhttp4k · org.http4k:http4k-core
- CVE-2026-61741http4s-scala-xml has an XML External Entity (XXE) processing issuehttp4s-scala-xml · org.http4s:http4s-scala-xml_2.12 +2
- CVE-2026-59990Jawn: Uncontrolled nesting depth in JSON parsertypelevel jawn · org.typelevel:jawn-parser_2.12 +2
- CVE-2026-61814Jawn: Quadratic parsing effort in AsyncParsertypelevel jawn · org.typelevel jawn-parser_2.12 +5
- CVE-2026-77420JLine: ReDoS via `HISTORY_IGNORE` Configuration Variablejline3 · org.jline:jline-reader
- CVE-2026-77422JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrappingjline3 · org.jline:jline-builtins
- CVE-2026-77421JLine: ReDoS in Nano Editor Regex Search Modejline3 · org.jline:jline-builtins
- CVE-2026-95848Moquette fails open when configured authentication or authorization classes cannot loadmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-95847Moquette client IDs can cause cross-session H2 durable-queue corruptionmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-95846Moquette publishes Last-Will messages without enforcing write authorizationmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-95845Moquette unbounded per-session message queues allow memory exhaustionmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-95844Moquette deeply nested MQTT topics can cause stack exhaustionmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-95843Moquette malformed shared subscriptions can crash command processingmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-95842Moquette uncaught MQTT command exceptions can terminate shared session event loopsmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-85724Moquette pattern ACL wildcard injection allows cross-tenant authorization bypassmoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-91777jackson-databind: quadratic forward-reference completion in Collection and Map deserializersFasterXML jackson-databind · com.fasterxml.jackson.core:… +1
- CVE-2026-91776jackson-databind: unbounded growth of the type id cache in TypeDeserializerBase retains every unknown raw type IDFasterXML jackson-databind · com.fasterxml.jackson.core:… +1
- CVE-2026-89425jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growthFasterXML jackson-core · com.fasterxml.jackson.core:jack… +1
- CVE-2026-61570MPXJ: XXE Vulnerability in MerlinReaderjoniles mpxj · net.sf.mpxj:mpxj +5
- CVE-2026-65829MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readersjoniles mpxj · MPXJ.Net +5
- CVE-2026-89407jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoSFasterXML jackson-core · com.fasterxml.jackson.core:jack… +1
- CVE-2026-69190Graylog: Manager-to-Owner privilege escalation on saved searches and dashboardsgraylog2-server · org.graylog2:graylog2-server
- CVE-2026-85058Moquette: Missing Authorization in io.moquette:moquette-brokermoquette-io moquette · io.moquette:moquette-broker
- CVE-2026-54147http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URIhttp4k · org.http4k:http4k-security-digest
- CVE-2026-54148http4k: `DigestAuthProvider.verify` did not bind to request URIhttp4k · org.http4k:http4k-security-digest
- CVE-2025-53837org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issuexwiki-rendering · org.xwiki.rendering:xwiki-rendering-xml
- CVE-2026-93451snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methodsxerial snappy-java · org.xerial.snappy:snappy-java
- CVE-2026-77615Paella Player: Stored XSS via caption cue textopencast · polimediaupv paella-player +2
- CVE-2026-54617GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandlerGravitLauncher Launcher · pro.gravit.launcher:launchserver-…
- CVE-2026-85716AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verifiedAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-85720AsyncHttpClient: Origin credentials sent to the proxy on the plaintext CONNECT requestAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-85721AsyncHttpClient: Unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of serviceAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-85717AsyncHttpClient: Client-wide realm credentials re-sent to a cross-origin redirect targetAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-61700MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requestsmariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…
- CVE-2026-86071Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction rootjunrar · com.github.junrar:junrar
- CVE-2026-81876HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of servicehapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +2
- CVE-2026-81875HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of servicehapifhir org.hl7.fhir.core · ca.uhn.hapi.fhir:org.hl7.fh… +2
- CVE-2026-75516RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcementrabbitmq-java-client · com.rabbitmq:amqp-client
- CVE-2026-63126Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)square wire · com.squareup.wire:wire-runtime
- CVE-2026-88975Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZEhttp4s · org.http4s:http4s-ember-core_2.13 +2
- CVE-2026-69206Http4s: DigestAuth allows replay of captured requestshttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69202Http4s Ember HTTP/2: unbounded inbound body bufferinghttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69218Http4s Ember HTTP/2: unbounded continuation frame accumulationhttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69203Http4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMShttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69215Http4s: CookieJar middleware matches by substring, leaking cookies cross-originhttp4s · org.http4s:http4s-client_2.12 +2
- CVE-2026-69205Http4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)http4s · org.http4s:http4s-ember-core_3 +2
- CVE-2026-69213Http4s Ember HTTP/2: unbounded outbound frame queuehttp4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69214Http4s: CookieJar middleware accepts arbitrary Set-Cookie domainhttp4s · org.http4s:http4s-client_2.12 +2
- CVE-2026-69201Http4s: ResourceService and Webjar Service path escape via percent-encoded separatorshttp4s · org.http4s:http4s-server_2.12 +2
- CVE-2026-69216Http4s: Ember chunk parser lenience (TE.TE request smuggling)http4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-69208Http4s: DigestAuth nonce map grows unboundedhttp4s · org.http4s:http4s-ember-server_2.12 +2
- CVE-2026-69204Http4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)http4s · org.http4s:http4s-ember-core_2.12 +2
- CVE-2026-55225Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`strimzi-kafka-operator · io.strimzi:strimzi
- CVE-2026-55226Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operatorstrimzi-kafka-operator · io.strimzi:strimzi
- CVE-2026-54251netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Servicenetty-incubator-codec-ohttp · io.netty.incubator netty-i… +1
- CVE-2026-54050Sakai: IDOR in Profile Image Deletion Allows Any Authenticated User to Delete Any User's Profile Imagesakaiproject sakai · org.sakaiproject.profile2:profile2-… +1
- CVE-2026-55864GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Toolcore-geonetwork · org.geonetwork-opensource:gn-web-app
- CVE-2026-65831ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file readArcadeData arcadedb · com.arcadedb arcadedb-server +1
- CVE-2026-54077ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated usersArcadeData arcadedb · com.arcadedb arcadedb-engine +1
- CVE-2026-54076ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)ArcadeData arcadedb · com.arcadedb arcadedb-engine +1
- CVE-2026-53966XWiki Platform: Privilege escalation from edit to script right through Live Data editingxwiki-platform · org.xwiki.platform:xwiki-platform-livedata…
- CVE-2026-46495OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMIOpenIdentityPlatform OpenDJ · org.openidentityplatform.o… +1
- CVE-2026-48722Nextflow: Incorrect default permissions in the nextflow auth login commandnextflow-io nextflow · io.nextflow:nextflow
- CVE-2026-48717OpenAM OAuth Authorization Bypass via PKCE ChallengeOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-47426OpenAM OAuth Client Impersonation via JWKS Resolver CacheOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-47424OpenAM Authenticated RCE via Groovy Sandbox EscapeOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-41573OpenAM LDAP Injection via `_queryId` ParameterOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-62280OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent pageOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45051OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator StorageOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-62263OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypassOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-46623OpenAM Account Takeover via Unverified Password Change in OAuth2 ModuleOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-46619OpenAM Authentication Bypass via MSISDN LDAP InjectionOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-46498OpenAM Arbitrary OAuth Token Minting via Push RegistrationOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45794OpenAM Unsafe Java Deserialization via SNSOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45048OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPCOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-44203OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)OpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-44202OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`OpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-62379OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallbackOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-53660OpenAM Insecure SSO Cookie InitializationOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-45052OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery EndpointsOpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-44793OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget`OpenIdentityPlatform OpenAM · org.openidentityplatform.open…
- CVE-2026-73494blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parserhttp4s blaze · org.http4s blaze-http_2.13 +5
- CVE-2026-53752docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Serviceplutext docx4j · org.docx4j docx4j-core +1
- CVE-2026-53659http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoShttp4k · org.http4k:http4k-core
- CVE-2026-55847Allure: Stored XSS via unescaped ANSI helper in Allure report status message/trace renderingallure-framework allure2 · io.qameta.allure allure-gener… +1
- CVE-2026-55846Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Readallure-framework allure2 · io.qameta.allure:allure-commandl…
- CVE-2026-34151XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+xwiki-platform · org.xwiki.platform:xwiki-platform-oldcore
- CVE-2026-50270dd-trace-java: Improper parsing of W3C baggage headers may lead to DoSDataDog dd-trace-java · com.datadoghq dd-java-agent +1
- CVE-2026-49439OpenRemote read-only asset users can write predicted datapointsopenremote · io.openremote:openremote-manager
- CVE-2026-49464NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taaknl-portal-backend-libraries · nl.nl-portal:taak
- CVE-2026-49463NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-librariesnl.nl-portal:besluiten · nl.nl-portal:documenten-api
- CVE-2026-68497jackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of serviceFasterXML jackson-databind · tools.jackson.core:jackson-… +1
- CVE-2026-84939Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacksApache Software Foundation Apache FreeMarker · org.freemark…
- CVE-2026-86597Sensitive information written to logs by Snowflake driversSnowflake Connector for Python · Snowflake Go Driver +11
- CVE-2026-49832DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDNDSpace · org.dspace:dspace-api
- CVE-2026-49833DSpace: Path Traversal possible in LDN message generationDSpace · org.dspace:dspace-api
- CVE-2026-49831DSpace: Curation Task Reporter output path is not restricted to trusted directories (Path Traversal Vulnerability)DSpace · org.dspace:dspace-api
- CVE-2026-49830DSpace: ORE resource URI does not validate scheme for non-web resourcesDSpace · org.dspace:dspace-api
- CVE-2026-32773Apache Spark: XSS Vulnerability in Spark Web 3.5.4Apache Software Foundation Apache Spark · pyspark +2
- CVE-2026-83557jackson-databind omits java.lang.Comparable from DefaultBaseTypeLimitingValidator's unsafe base typesFasterXML jackson-databind · tools.jackson.core:jackson-… +1
- CVE-2026-84218Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)Red Hat AMQ Broker · Red Hat build of Apache Camel 4 for… +4
- CVE-2026-19032jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.PathFasterXML jackson-databind · tools.jackson.core:jackson-… +1
- CVE-2026-55860MariaDB Connector/R2DBC: Cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)mariadb-corporation mariadb-connector-r2dbc · org.mariad… +1
- CVE-2026-55859MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadbmariadb-corporation mariadb-connector-r2dbc · org.mariad… +1
- CVE-2026-55858MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-clientmariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…
- CVE-2026-55857MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentialsmariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…
- CVE-2026-55856MariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshakemariadb-corporation mariadb-connector-j · org.mariadb.jdbc:…
- CVE-2026-55848mapfish-print: XXE on MapFish Print allows reading arbitrary files of certain typesmapfish-print · org.mapfish.print.print-lib +4
- CVE-2026-55867Graylog token revocation endpoint allows authenticated users to delete other users’ access tokensgraylog2-server · org.graylog2:graylog2-server
- CVE-2026-55841Graylog: Fortigate syslog message parser can be exploited to modify or delete fields from the original messagegraylog2-server · org.graylog2:graylog2-server
- CVE-2026-55673PowSyBl: Command Injection in LocalCommandExecutor-spowsybl-core · com.powsybl:powsybl-computation-local
- CVE-2026-55425Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fieldsgraylog2-server · org.graylog2:graylog2-server
- CVE-2026-55566Yamcs: DOM XSS in Extension Routingyamcs · org.yamcs:yamcs-core
- CVE-2026-55565Yamcs: Authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)yamcs · org.yamcs:yamcs-core
- CVE-2026-55559Yamcs: Remote Code Execution via instance-template argument YAML injection (createInstance)yamcs · org.yamcs:yamcs-core
- CVE-2026-55552Yamcs: Unauthenticated Directory Traversalyamcs · org.yamcs:yamcs-core
- CVE-2026-55549Yamcs: Reflected XSS in the URL of the Authorize Endpointyamcs · org.yamcs:yamcs-core
- CVE-2026-55547Yamcs: Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configurationyamcs · org.yamcs:yamcs-core
- CVE-2026-55545Yamcs: WebSocket subscription handlers omit the privilege checks their REST siblings enforceyamcs · org.yamcs:yamcs-core
- CVE-2026-55521Yamcs : Multiple Missing Function Level Access Control vulnerabilities in Yamcs Core APIyamcs · org.yamcs:yamcs-core
- CVE-2026-55511Yamcs: Authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs `executeSql`yamcs · org.yamcs:yamcs-core
- CVE-2026-47892Spring Framework Header Predicate Bypass in WebFlux Functional EndpointsSpring Framework · org.springframework:spring-webflux
- CVE-2026-47890Spring Framework Server Sent Event stream corruption while rendering fragmentsSpring Framework · org.springframework:spring-webflux +1
- CVE-2026-47884Spring Framework Improper Path Limitation in XsltViewSpring Framework · org.springframework:spring-webmvc
- CVE-2026-54550IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entriesizpack · org.codehaus.izpack:izpack-installer
- CVE-2026-54556Http4s: HTTP/2 Denial of Service with Ember Backendhttp4s · org.http4s http4s-ember-core_2.12 +5
- CVE-2026-68525Apache Tomcat: Redirect after FORM auth may bypass method specific constraintsApache Software Foundation Apache Tomcat · org.apache.to… +2
- CVE-2026-65905Apache Tomcat: Limited replay attack possible with DIGEST authenticationApache Software Foundation Apache Tomcat · org.apache.to… +2
- CVE-2026-65637Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incompleteApache Software Foundation Apache Tomcat · org.apache.to… +1
- CVE-2026-65182Apache Tomcat: Bypass longest prefix security constraintApache Software Foundation Apache Tomcat · org.apache.to… +2
- CVE-2026-77310jackson-databind: Eager DNS resolution (SSRF) still present in InetAddress deserialization (Incomplete fix for CVE-2026-54514)com.fasterxml.jackson.core:jackson-databind · FasterXML… +1
- CVE-2026-78329Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routesApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-71300Apache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injectionApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-63621Apache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategyApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-66908Apache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was acceptedApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-66907Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the resultApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-66906Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDirApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-60093Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDirApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-59230Apache Camel: Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabledApache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2026-76904GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layersgeotools · org.geotools.jdbc:gt-jdbc-postgis
- CVE-2026-75140jsoup Uncontrolled Resource Consumption in XmlTreeBuilderjhy soup · org.jsoup:jsoup
- CVE-2026-63490Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypassjknack handlebars.java · com.github.jknack:handlebars-sprin…
- CVE-2026-75595Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContextnetty · io.netty:netty-handler
- CVE-2026-75596Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsingnetty · io.netty:netty-handler
- CVE-2026-18963Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypassRed Hat build of Keycloak · Red Hat JBoss Enterprise App… +2
- CVE-2026-61634RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_maxrabbitmq-java-client · com.rabbitmq:amqp-client
- CVE-2026-63336RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITMrabbitmq-java-client · com.rabbitmq:amqp-client
- CVE-2026-63337RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loadingrabbitmq-java-client · com.rabbitmq:amqp-client
- CVE-2026-69220RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoSrabbitmq-java-client · com.rabbitmq:amqp-client
- CVE-2026-53434Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM ConnectorApache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2026-9083Keycloak: keycloak: information disclosure through arbitrary filesystem path probingRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-9799Keycloak: keycloak: unauthorized access to resources via uma permission ticket bypassRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-9705Keycloak: keycloak: attacker can re-enable and take over disabled clients via registration access tokenRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-9086Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypassRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-9800Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparisonRed Hat build of Keycloak · Red Hat build of Quarkus 3.2… +6